Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: hRGqYHfU6GKT0WVxLjScNBoKySz+Y6Prv40BRTTncbM=
Subject key identifier: 9B:43:94:C2:18:20:88:5F:80:4A:C5:DD:AA:1D:B3:6E:94:8D:A8:18
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 01A0CB5947E0B3366CA7DA00B9B6988611B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 011E
Signing time: Tue 22 Sep 2026 23:00:20 +0000
Manifest this update: Tue 22 Sep 2026 23:00:20 +0000
Manifest next update: Wed 23 Sep 2026 23:00:20 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: RvCyJTvaUQE6qrMv2VIhjcgIUFFAsSESGDRa8OJJMBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:47:e0:b3:36:6c:a7:da:00:b9:b6:98:86:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Sep 22 23:00:20 2026 GMT
Not After : Sep 23 23:00:20 2026 GMT
Subject: CN=9b4394c21820885f804ac5ddaa1db36e948da818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:05:b2:b7:0f:55:e6:a9:3e:f5:98:41:1d:
fe:81:cb:3b:5a:2b:ff:4f:df:14:d8:2f:63:8a:8c:
44:b2:b9:b7:41:09:9e:a2:e9:c3:18:dc:aa:d6:26:
f2:cf:71:0d:e7:0c:5e:62:13:03:df:94:6e:30:4f:
73:cf:f2:df:17:1a:1b:27:02:24:0c:20:0b:69:64:
4d:22:f8:d5:68:1a:ef:65:14:1c:9d:f4:07:59:61:
72:53:a9:42:f8:12:70:5b:a1:80:37:22:81:4d:d0:
14:84:f2:1c:0e:41:66:d6:d7:42:53:28:ae:b1:c5:
ef:59:04:78:d7:67:ac:ff:a5:bd:b5:0d:a4:ca:8b:
9f:f6:0b:fe:f3:08:29:e5:5c:db:b2:b9:49:f5:2c:
b8:60:13:1c:ff:af:7c:e4:1f:d7:c7:bc:82:d2:48:
93:10:ee:c1:18:cf:83:72:df:a1:ab:ab:35:7e:d0:
00:a7:4f:fc:4f:4a:dc:15:25:17:b2:31:43:69:29:
3f:16:cd:c0:85:d7:c8:a1:dc:2c:cd:28:e3:86:89:
e8:a2:b3:b2:3f:e4:04:4e:48:1e:14:14:dd:cf:f4:
4b:80:38:8f:d7:8e:9b:58:61:6b:c3:76:ae:62:22:
cc:e4:a6:74:96:b7:c6:ba:f3:94:64:a1:32:b4:ad:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:94:C2:18:20:88:5F:80:4A:C5:DD:AA:1D:B3:6E:94:8D:A8:18
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:84:e9:b0:27:1f:e4:25:61:c8:a0:fd:bc:af:c8:e8:07:
af:24:90:e8:44:64:6a:63:42:8a:d4:8b:ad:32:ba:6f:d2:cb:
fe:e5:46:0e:95:50:23:42:66:74:72:da:f0:8b:02:94:35:ef:
e6:0d:1c:03:31:e3:e9:16:ba:cc:93:5e:c7:5b:a4:b2:b0:7c:
8d:8a:2c:4f:9e:f2:a1:ad:78:6c:be:69:0c:f8:0f:61:bd:c5:
7d:7a:72:df:f3:cb:13:74:c1:c5:9f:96:db:01:41:25:99:e1:
6b:cb:b2:87:ee:de:7a:ca:af:16:26:a5:d2:b3:05:a5:73:48:
b0:a0:77:c9:76:2d:ab:af:1a:f8:69:02:b8:ea:33:a7:e2:66:
6b:5a:84:cc:5d:c3:4e:5f:b8:8d:23:32:3c:5b:fd:35:7d:0e:
b0:4a:46:e8:d7:85:34:8e:34:30:59:f5:c6:50:2f:19:6d:d8:
7a:bb:50:cf:b9:bf:8c:3a:9a:f8:c1:92:0b:11:cc:bd:6e:ae:
ab:fd:29:6c:7c:57:3f:18:d3:8f:2f:96:d0:33:b0:37:6e:36:
f9:a9:b7:0b:e5:db:1c:3e:bd:59:ee:34:1b:79:c4:d2:bc:b2:
ff:de:35:14:16:b8:0e:83:8b:cc:eb:a0:a4:65:57:d1:12:8b:
61:8d:77:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWUfgszZsp9oAubaYhhGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OGY5M2NhN2NlMWM0NThjYjY0NmYzN2ExYzk2MjgwMDhl
ZDk1ZTkwHhcNMjYwOTIyMjMwMDIwWhcNMjYwOTIzMjMwMDIwWjAzMTEwLwYDVQQD
Eyg5YjQzOTRjMjE4MjA4ODVmODA0YWM1ZGRhYTFkYjM2ZTk0OGRhODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnAFsrcPVeapPvWYQR3+gcs7Wiv/
T98U2C9jioxEsrm3QQmeounDGNyq1ibyz3EN5wxeYhMD35RuME9zz/LfFxobJwIk
DCALaWRNIvjVaBrvZRQcnfQHWWFyU6lC+BJwW6GANyKBTdAUhPIcDkFm1tdCUyiu
scXvWQR412es/6W9tQ2kyouf9gv+8wgp5VzbsrlJ9Sy4YBMc/6985B/Xx7yC0kiT
EO7BGM+Dct+hq6s1ftAAp0/8T0rcFSUXsjFDaSk/Fs3AhdfIodwszSjjhonoorOy
P+QETkgeFBTdz/RLgDiP146bWGFrw3auYiLM5KZ0lrfGuvOUZKEytK16VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtDlMIYIIhfgErF3aods26UjagYMB8GA1UdIwQY
MBaAFPSPk8p84cRYy2RvN6HJYoAI7ZXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEt
ZDJmYzdmMWNiYzIzLzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEtZDJmYzdmMWNiYzIz
LzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHaE6bAn
H+QlYcig/byvyOgHrySQ6ERkamNCitSLrTK6b9LL/uVGDpVQI0JmdHLa8IsClDXv
5g0cAzHj6Ra6zJNex1uksrB8jYosT57yoa14bL5pDPgPYb3FfXpy3/PLE3TBxZ+W
2wFBJZnha8uyh+7eesqvFial0rMFpXNIsKB3yXYtq68a+GkCuOozp+Jma1qEzF3D
Tl+4jSMyPFv9NX0OsEpG6NeFNI40MFn1xlAvGW3YertQz7m/jDqa+MGSCxHMvW6u
q/0pbHxXPxjTjy+W0DOwN242+am3C+XbHD69We40G3nE0ryy/941FBa4DoOLzOug
pGVX0RKLYY13uA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:36 2026 by rpki-client